CB Response: Linux processes in search/preview do not match Process Analysis page

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

• Process Search and preview show one process, but when the Process Analysis page loads, a different process is loaded
• The process document returns different processes for different segments

Environment

• CB Response Server: All Versions
• CB Response Sensor: 6.1.7 and Higher
• Linux: All Supported Versions

Cause

This is a known issue in the Linux sensor when processes are assigned matching process IDs - CB-23212

Resolution

Carbon Black will resolve this issue in a future version of the sensor